Update dependency Werkzeug to v3.1.4 #34

Merged

finn merged 1 commit from renovate/werkzeug-3.x into master

2025-11-29 10:56:01 +01:00

renovate-bot commented

2025-11-29 03:37:13 +01:00

Collaborator

This PR contains the following updates:

Package	Update	Change
Werkzeug (changelog)	patch	`==3.1.3` -> `==3.1.4`

Release Notes

pallets/werkzeug (Werkzeug)

`v3.1.4`

Compare Source

Released 2025-11-28

safe_join on Windows does not allow special device names. This prevents
reading from these when using send_from_directory. secure_filename
already prevented writing to these. :ghsa:hgf8-39gv-g3f2
The debugger pin fails after 10 attempts instead of 11. :pr:3020
The multipart form parser handles a \r\n sequence at a chunk boundary.
:issue:3065
Improve CPU usage during Watchdog reloader. :issue:3054
Request.json annotation is more accurate. :issue:3067
Traceback rendering handles when the line number is beyond the available
source lines. :issue:3044
HTTPException.get_response annotation and doc better conveys the
distinction between WSGI and sans-IO responses. :issue:3056

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [Werkzeug](https://github.com/pallets/werkzeug) ([changelog](https://werkzeug.palletsprojects.com/page/changes/)) | patch | `==3.1.3` -> `==3.1.4` | --- ### Release Notes <details> <summary>pallets/werkzeug (Werkzeug)</summary> ### [`v3.1.4`](https://github.com/pallets/werkzeug/blob/HEAD/CHANGES.rst#Version-314) [Compare Source](https://github.com/pallets/werkzeug/compare/3.1.3...3.1.4) Released 2025-11-28 - `safe_join` on Windows does not allow special device names. This prevents reading from these when using `send_from_directory`. `secure_filename` already prevented writing to these. :ghsa:`hgf8-39gv-g3f2` - The debugger pin fails after 10 attempts instead of 11. :pr:`3020` - The multipart form parser handles a `\r\n` sequence at a chunk boundary. :issue:`3065` - Improve CPU usage during Watchdog reloader. :issue:`3054` - `Request.json` annotation is more accurate. :issue:`3067` - Traceback rendering handles when the line number is beyond the available source lines. :issue:`3044` - `HTTPException.get_response` annotation and doc better conveys the distinction between WSGI and sans-IO responses. :issue:`3056` </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit

2025-11-29 03:37:13 +01:00